1. General Provisions
OUREON (“the Company” or “OUREON”) values the privacy of its users and complies with the Personal Information Protection Act and other applicable laws. This Privacy Policy explains what personal information is collected in connection with the services provided by OUREON (https://oureon.co.kr), the purposes of collection, the retention and use period, and matters related to outsourced processing.
2. Personal Information Collected and Collection Methods
OUREON may collect the following personal information:
- When posting a comment: name, email address, comment content, IP address, browser information (for spam prevention)
- When subscribing to the newsletter: email address
- Information automatically collected during service use: access IP, cookies, visit date/time, service usage records, browser and device information
Personal information is collected either directly from users (e.g., when posting comments or subscribing to the newsletter) or automatically generated and collected during use of the service.
3. Purposes of Collection and Use of Personal Information
- Providing content and newsletters, operating and managing the service
- Registering and managing comments, and preventing spam and fraudulent use
- Analyzing service usage statistics and improving content quality
- Delivering notices and responding to inquiries
4. Retention and Use Period of Personal Information
In principle, OUREON destroys personal information without delay once the purpose of its collection and use has been achieved. However, where retention is required under applicable law, the Company retains information for the periods set out below:
- Records related to display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
- Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Access records: 3 months (Protection of Communications Secrets Act)
5. Provision of Personal Information to Third Parties
In principle, OUREON does not disclose users’ personal information to third parties. Exceptions apply in the following cases:
- Where the user has given separate prior consent
- Where required by law, or requested by an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes
6. Outsourcing of Personal Information Processing
To ensure smooth service delivery and operations, OUREON outsources certain personal information processing tasks to the external providers listed below, and requires the necessary safeguards for the secure handling of personal information under its outsourcing agreements:
- Hosting and server operations: Cafe24
- Workflow automation and newsletter/content distribution: Make (Make.com)
- Email newsletter delivery and subscriber management: Brevo (Sendinblue SAS)
- Inbound email forwarding for @oureon.co.kr addresses: ImprovMX
- Website analytics: Google Analytics (Google LLC)
7. Transfer of Personal Information Overseas
OUREON uses overseas service providers to operate this website and deliver its newsletter. Personal information is transferred as follows:
- Brevo (Sendinblue SAS) — Recipient country: France (EU). Transferred items: email address, subscription date and time, IP address at the time of consent, and email open and click records. Purpose: delivery of the OUREON newsletter and management of subscriber lists. Retention: until the subscriber withdraws consent or unsubscribes.
- Make (Make.com) — Recipient country: Czech Republic (EU). Transferred items: content data required for publication workflows. Purpose: automated content publishing. Retention: for the duration of the service agreement.
- ImprovMX — Recipient country: France (EU). Transferred items: email messages sent to @oureon.co.kr addresses. Purpose: forwarding inbound email. Retention: messages are forwarded and not stored.
- Google LLC — Recipient country: United States. Transferred items: cookies, access IP, device and browser information, and site usage records. Purpose: website traffic analysis. Retention: in accordance with Google Analytics data retention settings.
Users may refuse the transfer of their personal information overseas. However, as these transfers are essential to the operation of the newsletter and the website, refusal may make it impossible to provide the newsletter service. To refuse, please contact us at the address in the Data Protection Officer section below, or unsubscribe using the link included in every newsletter.
8. Use of and Opt-Out from Cookies
OUREON may use cookies to provide services tailored to users. Cookies are small pieces of information sent by the server operating the website to a user’s browser. Users may refuse to allow cookies or delete them through their browser settings. Please note that refusing cookies may limit some aspects of the service.
9. User Rights and How to Exercise Them
Users may view or correct their personal information at any time, and may request withdrawal of consent to its collection and use. To request access, correction, or deletion of personal information, please contact the Data Protection Officer listed below, and the Company will act without delay.
10. Destruction of Personal Information
OUREON destroys personal information without delay once the purpose of its collection and use has been achieved. Information stored in electronic file form is deleted using technical methods that prevent recovery, and personal information recorded on paper is destroyed by shredding or incineration.
11. Data Protection Officer
OUREON has designated a Data Protection Officer, listed below, who is responsible for the overall management of personal information processing and for handling user complaints and remedying any harm related to the processing of personal information.
- Department: OUREON Editorial Team
- Email: privacy@oureon.co.kr
12. Changes to This Privacy Policy
If this Privacy Policy is added to, deleted from, or otherwise revised due to changes in law, policy, or security technology, notice will be posted on the website at least 7 days before the changes take effect.
Effective Date: August 21, 2026 · Last revised: August 31, 2026